Malware Campaign Exploits Web3 Sector with npm Packages

Elastic Security Labs researchers uncovered a malware campaign, dubbed REF8801, that hides in seemingly legitimate Web3 npm packages and delivers information-stealing malware and backdoors to victims lured with promises of free AI credits. The campaign masquerades as a Web3 venture capital accelerator called Apex Accelerator.